It seems there's no way to add Auth to an API with NoContentVerb (added in servant-0.17) because that type instance is missing.
To be clear, it's missing for good reason. You can't add headers to a NoContentVerb. That might need to be fixed upstream before this library can do anything. Still, I would have found it helpful to have some mention of the problem in this issue tracker, so I'm mentioning it.
As a workaround, I've added this instance in my own package,
type instance AuthI.AddSetCookieApi (Servant.NoContentVerb method)
= Servant.Verb
method
204
'[Servant.JSON]
(AuthI.AddSetCookieApiVerb NoContent)
but that restricts the content-types, which NoContentVerb shouldn't do.